Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yP33-Iju31H3KzAF09yhZ5BH21w.roa
File: yP33-Iju31H3KzAF09yhZ5BH21w.roa (raw, json)
Hash identifier: InyY9kMIiYk3QPT0nFSKSPGVCZ7r63OhQWOhYQK1WIA=
Subject key identifier: C8:FD:F7:F8:88:EE:DF:51:F7:2B:30:05:D3:DC:A1:67:90:47:DB:5C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E2B78D099D2AF06C4120A85FDF7188535
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yP33-Iju31H3KzAF09yhZ5BH21w.roa
Signing time: Fri 15 May 2026 11:49:58 +0000
ROA not before: Fri 15 May 2026 11:49:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56971
IP address blocks: 31.56.27.0/24 maxlen: 24
31.56.28.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.113.0/24 maxlen: 24
31.56.117.0/24 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.176.0/22 maxlen: 24
31.56.196.0/24 maxlen: 24
31.56.197.0/24 maxlen: 24
31.56.204.0/24 maxlen: 24
31.56.205.0/24 maxlen: 24
31.56.206.0/24 maxlen: 24
31.56.222.0/24 maxlen: 24
31.56.227.0/24 maxlen: 24
31.56.228.0/24 maxlen: 24
31.56.229.0/24 maxlen: 24
31.57.24.0/24 maxlen: 24
31.57.26.0/24 maxlen: 24
31.57.27.0/24 maxlen: 24
31.57.28.0/23 maxlen: 24
31.57.28.0/24 maxlen: 24
31.57.29.0/24 maxlen: 24
31.57.46.0/24 maxlen: 24
31.57.47.0/24 maxlen: 24
31.57.61.0/24 maxlen: 24
31.57.62.0/24 maxlen: 24
31.57.63.0/24 maxlen: 24
31.57.92.0/24 maxlen: 24
31.57.93.0/24 maxlen: 24
31.57.105.0/24 maxlen: 24
31.57.106.0/24 maxlen: 24
31.57.107.0/24 maxlen: 24
31.57.108.0/24 maxlen: 24
31.57.109.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.157.0/24 maxlen: 24
31.57.158.0/24 maxlen: 24
31.57.250.0/24 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.76.0/22 maxlen: 24
31.58.76.0/24 maxlen: 24
31.58.77.0/24 maxlen: 24
31.58.78.0/24 maxlen: 24
31.58.79.0/24 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.134.0/24 maxlen: 24
31.58.171.0/24 maxlen: 24
31.58.220.0/24 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.38.0/24 maxlen: 24
31.59.40.0/23 maxlen: 24
31.59.40.0/24 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.44.0/23 maxlen: 24
31.59.102.0/23 maxlen: 24
31.59.104.0/23 maxlen: 24
31.59.106.0/24 maxlen: 24
31.59.120.0/24 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/24 maxlen: 24
31.59.139.0/24 maxlen: 24
31.59.168.0/24 maxlen: 24
31.59.170.0/24 maxlen: 24
31.59.174.0/24 maxlen: 24
31.59.175.0/24 maxlen: 24
94.183.151.0/24 maxlen: 24
94.183.159.0/24 maxlen: 24
94.183.177.0/24 maxlen: 24
94.183.178.0/24 maxlen: 24
94.183.182.0/24 maxlen: 24
94.183.183.0/24 maxlen: 24
94.183.184.0/24 maxlen: 24
94.183.185.0/24 maxlen: 24
94.183.186.0/24 maxlen: 24
94.183.187.0/24 maxlen: 24
94.183.188.0/24 maxlen: 24
94.183.189.0/24 maxlen: 24
94.183.190.0/24 maxlen: 24
94.183.191.0/24 maxlen: 24
94.183.232.0/24 maxlen: 24
94.183.233.0/24 maxlen: 24
94.183.234.0/24 maxlen: 24
94.183.235.0/24 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.0.0/24 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.2.0/24 maxlen: 24
217.60.3.0/24 maxlen: 24
217.60.4.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.6.0/24 maxlen: 24
217.60.7.0/24 maxlen: 24
217.60.26.0/24 maxlen: 24
217.60.36.0/24 maxlen: 24
217.60.37.0/24 maxlen: 24
217.60.38.0/24 maxlen: 24
217.60.39.0/24 maxlen: 24
217.60.60.0/22 maxlen: 24
217.60.98.0/24 maxlen: 24
217.60.186.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
217.60.249.0/24 maxlen: 24
217.60.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:78:d0:99:d2:af:06:c4:12:0a:85:fd:f7:18:85:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 15 11:49:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8fdf7f888eedf51f72b3005d3dca1679047db5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:0e:b9:ed:cf:05:f2:95:49:1c:aa:a0:29:
01:98:b7:4f:56:ea:25:5a:c4:3a:4d:34:78:55:fe:
15:14:ac:18:b2:d2:a5:e8:d2:bc:2a:5a:cb:59:73:
fb:41:49:54:68:09:02:29:7a:6c:4c:14:ce:43:37:
74:2c:51:df:26:c7:eb:88:bf:f6:45:2f:7c:a1:b5:
e0:ae:d0:5a:1a:ee:ba:7b:2b:0b:7b:11:39:33:10:
45:a1:ad:67:52:f7:34:fe:2c:27:20:28:c6:69:19:
4a:75:e5:77:f3:c3:8c:23:01:ae:d0:b8:d3:11:5c:
cb:23:dd:81:28:b5:86:5d:aa:74:4e:7b:99:d9:d7:
33:59:ab:71:46:a0:8f:ac:e7:b5:36:f0:80:d9:53:
3d:ce:dc:99:a8:e3:e7:55:7c:4d:37:73:ff:68:af:
f5:91:bd:e9:d0:60:68:ed:52:1c:1a:4d:1d:fe:fc:
51:d1:ba:27:dc:f4:b0:9b:c6:80:f9:bc:0f:91:32:
8e:8e:9a:91:24:9b:78:7c:16:4d:74:29:f1:fa:c2:
de:df:82:fa:81:c0:ea:fb:ac:a7:7d:72:b6:72:5a:
93:49:9d:02:5f:17:21:50:f2:0e:11:d5:45:57:42:
e0:00:6f:76:ec:9b:18:b4:e2:9b:9b:ab:2f:1f:a4:
30:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FD:F7:F8:88:EE:DF:51:F7:2B:30:05:D3:DC:A1:67:90:47:DB:5C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yP33-Iju31H3KzAF09yhZ5BH21w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.27.0-31.56.28.255
31.56.48.0/24
31.56.113.0/24
31.56.117.0/24
31.56.146.0/24
31.56.176.0/22
31.56.196.0/23
31.56.204.0-31.56.206.255
31.56.222.0/24
31.56.227.0-31.56.229.255
31.57.24.0/24
31.57.26.0-31.57.29.255
31.57.46.0/23
31.57.61.0-31.57.63.255
31.57.92.0/23
31.57.105.0-31.57.109.255
31.57.118.0/24
31.57.157.0-31.57.158.255
31.57.250.0/24
31.58.50.0/24
31.58.76.0/22
31.58.87.0/24
31.58.134.0/24
31.58.171.0/24
31.58.220.0/24
31.58.226.0/24
31.59.38.0/24
31.59.40.0/23
31.59.44.0/23
31.59.102.0-31.59.106.255
31.59.120.0/23
31.59.136.0/24
31.59.138.0/23
31.59.168.0/24
31.59.170.0/24
31.59.174.0/23
94.183.151.0/24
94.183.159.0/24
94.183.177.0-94.183.178.255
94.183.182.0-94.183.191.255
94.183.232.0/22
217.60.0.0/21
217.60.26.0/24
217.60.36.0/22
217.60.60.0/22
217.60.98.0/24
217.60.186.0/24
217.60.248.0/23
217.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f6:5f:33:ed:27:e2:35:f9:29:02:04:8b:a0:d5:d0:67:b9:
99:9a:e6:ea:c0:85:7a:b0:25:7f:da:3e:42:82:83:dd:ad:5e:
53:b6:d8:60:0d:f5:67:af:48:5e:8a:b0:fb:f5:3d:f9:53:c8:
4e:81:95:54:3b:4f:16:92:ab:2a:ea:52:33:f8:74:d9:85:80:
3e:b8:9b:6f:8c:3d:5b:6c:73:3d:d4:0b:9a:8c:4a:a0:34:f7:
91:f6:64:84:53:d4:58:28:21:92:23:80:26:fa:c6:c2:f2:7d:
48:e7:b7:6c:92:48:ec:ac:b1:2f:45:42:c6:33:74:5e:2e:ed:
f8:61:a7:c1:73:84:d9:0c:c0:d2:1f:9b:79:57:e0:fa:07:de:
90:38:7e:4e:a2:5d:34:8f:3b:92:f1:f2:d3:82:3b:a3:5f:2e:
b3:2a:23:45:60:5c:7a:d0:8f:9b:18:46:0b:1a:5b:32:3b:b2:
7e:db:a8:5b:b8:a4:c8:d9:1e:e1:ee:79:06:ae:75:a5:3b:eb:
07:49:66:ce:e0:61:30:9f:7c:bd:a5:6b:b6:6e:74:1b:ef:41:
01:c7:7c:73:7b:5d:3e:72:8d:91:4c:02:3e:89:39:91:ed:c7:
81:02:17:45:40:88:71:16:68:09:8b:76:4d:32:72:86:23:81:
df:48:0e:b8
-----BEGIN CERTIFICATE-----
MIIGdzCCBV+gAwIBAgISAZ4reNCZ0q8GxBIKhf33GIU1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNTE1MTE0OTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGZkZjdmODg4ZWVkZjUxZjcyYjMwMDVkM2RjYTE2NzkwNDdkYjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4kOue3PBfKVSRyqoCkBmLdPVuol
WsQ6TTR4Vf4VFKwYstKl6NK8KlrLWXP7QUlUaAkCKXpsTBTOQzd0LFHfJsfriL/2
RS98obXgrtBaGu66eysLexE5MxBFoa1nUvc0/iwnICjGaRlKdeV388OMIwGu0LjT
EVzLI92BKLWGXap0TnuZ2dczWatxRqCPrOe1NvCA2VM9ztyZqOPnVXxNN3P/aK/1
kb3p0GBo7VIcGk0d/vxR0bon3PSwm8aA+bwPkTKOjpqRJJt4fBZNdCnx+sLe34L6
gcDq+6ynfXK2clqTSZ0CXxchUPIOEdVFV0LgAG927JsYtOKbm6svH6QwgQIDAQAB
o4IDgzCCA38wHQYDVR0OBBYEFMj99/iI7t9R9yswBdPcoWeQR9tcMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEveVAzMy1JanUzMUgzS3pBRjA5eWhaNUJIMjF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBlwYIKwYBBQUHAQcBAf8EggGGMIIBgjCCAX4EAgABMIIB
djAMAwQAHzgbAwQAHzgcAwQAHzgwAwQAHzhxAwQAHzh1AwQAHziSAwQCHziwAwQB
HzjEMAwDBAIfOMwDBAAfOM4DBAAfON4wDAMEAB844wMEAR845AMEAB85GDAMAwQB
HzkaAwQBHzkcAwQBHzkuMAwDBAAfOT0DBAYfOQADBAEfOVwwDAMEAB85aQMEAR85
bAMEAB85djAMAwQAHzmdAwQAHzmeAwQAHzn6AwQAHzoyAwQCHzpMAwQAHzpXAwQA
HzqGAwQAHzqrAwQAHzrcAwQAHzriAwQAHzsmAwQBHzsoAwQBHzssMAwDBAEfO2YD
BAAfO2oDBAEfO3gDBAAfO4gDBAEfO4oDBAAfO6gDBAAfO6oDBAEfO64DBABet5cD
BABet58wDAMEAF63sQMEAF63sjAMAwQBXre2AwQGXreAAwQCXrfoAwQD2TwAAwQA
2TwaAwQC2TwkAwQC2Tw8AwQA2TxiAwQA2Ty6AwQB2Tz4AwQA2Tz8MA0GCSqGSIb3
DQEBCwUAA4IBAQAt9l8z7SfiNfkpAgSLoNXQZ7mZmubqwIV6sCV/2j5CgoPdrV5T
tthgDfVnr0heirD79T35U8hOgZVUO08Wkqsq6lIz+HTZhYA+uJtvjD1bbHM91Aua
jEqgNPeR9mSEU9RYKCGSI4Am+sbC8n1I57dskkjsrLEvRULGM3ReLu34YafBc4TZ
DMDSH5t5V+D6B96QOH5Ool00jzuS8fLTgjujXy6zKiNFYFx60I+bGEYLGlsyO7J+
26hbuKTI2R7h7nkGrnWlO+sHSWbO4GEwn3y9pWu2bnQb70EBx3xze10+co2RTAI+
iTmR7ceBAhdFQIhxFmgJi3ZNMnKGI4HfSA64
-----END CERTIFICATE-----
Generated at Wed May 27 15:56:33 2026 by rpki-client